Open Bug 1403931 Opened 7 years ago Updated 4 hours ago

[meta] Enable USER_RESTRICTED for content processes

Categories

(Core :: Security: Process Sandboxing, enhancement, P2)

Product:
Core
Component:
Security: Process Sandboxing
Platform:
All
Windows
Type:
enhancement

Tracking

()

People

(Reporter: jimm, Assigned: bobowen)

References

(Depends on 6 open bugs, Blocks 1 open bug)

Details

(Keywords: meta, Whiteboard: sb+) 

USER_RESTRICTED
* breaks font loading
* removes networking
* breaks web audio /  webrtc?
* removes remaining read access (user token)
* TBD
status-firefox58: affected → ---
Priority: -- → P2
Whiteboard: sb+
No longer depends on: 1574512
Depends on: 1696387

Note: removing the network access is also important in the context that it removes any excuse to inject into the content process to inspect networking.

Depends on: 1739831
Depends on: 1741223
Severity: normal → S3
Summary: [meta] Enable USER_RESTRICTED for content processes → [meta] Enable USER_LOCKDOWN for content processes
See Also: → 1831036
Summary: [meta] Enable USER_LOCKDOWN for content processes → [meta] Enable USER_RESTRICTED for content processes
Depends on: 1891986
Depends on: 1892051
Depends on: 1892226
Depends on: 1892282
Depends on: 1892399
You need to log in before you can comment on or make changes to this bug.